S_Threat analysis – a case study smart metering

《S_Threat analysis – a case study smart metering》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、Threatanalysis–acasestudy:smartmeteringPekkaSavolainenVTTTechnicalResearchCentreofFinland11/11/20132CyberSecurityinAdvancedMeterManagementProjectgoals:ThebigpictureofcybersecurityrisksintheAMMsystemsExplainedtotheDSO’sandserviceprovidersProposedevelopmenttargets–aroadmapIncludingcompany-

2、specificobjectivesforthestakeholdersLogicalreferencemodelofthesmartgrid11/11/20133NISTGuidelinesforSmartGridCyberSecurity,Aug201011/11/20134Smartmeterreadingandmanagmentdatatransmission–Residentialmetersinterfaces,assets,vulnerabilitiesMobileoperatorDSOorServiceProviderConcentratorRS‐485busTh

3、irdparty2G/3G‐meter,point‐to‐point,industrialVPNVPNMeterDataVPNOtherVPNCustomerAMIManagementinformationusagedataHeadendConcentratorSystemssystemsreportingMeterManagementSystemsMeshnetCustomerdata,ConcentratorBilling,BalanceSettlement,MetermanagementMarketing,Consumers,PLC…fieldcrewOutagemanag

4、ementsystems,Marketers,PDA,Geographicinformationsystems,ServiceLaptop,etc.Powerquality,Eventanalysis,ProvidersDistributionmanagement,etc.In‐homedevices11/11/20135ResidentialmetersMobileoperatorDSOorExample:ServiceProviderConcentratorServiceProvidercarelessindatabaseaccesscontrolRS‐485bus(THRE

5、ATTOPRIVACY!)Thirdparty2G/3G‐meter,point‐to‐point,industrialVPNVPNMeterDataVPNOtherVPNCustomerAMIManagementinformationusagedataHeadendConcentratorSystemssystemsreportingMeterManagementSystemsMeshnetCustomerdata,ConcentratorBilling,BalanceSettlement,MetermanagementMarketing,Consumers,PLC…field

6、crewOutagemanagementsystems,Marketers,PDA,Geographicinformationsystems,ServiceLaptop,etc.Powerquality,Eventanalysis,ProvidersDistributionmanagement,etc.In‐homedevices11/11/20136DSOorExample:ServiceProviderServiceProvidercarelessindatabaseaccesscontrolNegativeeffectsto(THREATTOPRIVACY!)reputat

7、ionacrosstheentirebusinessnetwork!VPNMeterDataVPNManagementSystems11/11/20137ThreatexamplesServiceProvider’siscarelessdatabaseaccesscontrol(PRIVACYATRISK!)Networkmanagementrulesandmonitoringarelacking(NETWORKRELIABILITY?)Systemoperationrulesa